security
Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.
Repositories (1486)
Open source AI terminal for cloud and infrastructure management, enabling you to deploy, troubleshoot, and automate services using natural language an...
Awesome Node.js Security resources
A compilation of sites with dumb password rules.
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audit...
🔥Open source RASP solution
Authorization service and frontend for Docker registry (v2)
edb is a cross-platform AArch32/x86/x86-64 debugger.
PingCastle - Get Active Directory Security at 80% in 20% of the time
Security scanner for AI agents, MCP servers and agent skills.
The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1...
DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic
A completely free, open source and online course about Reverse Engineering iOS Applications.
Projects for security students
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using dat...
user.js -- Firefox configuration hardening
Open source vulnerability DB and triage service.
Pentest Report Generator
A lightweight LDAP server for development, home use, or CI
本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。
Let's make an annoyance free, better open internet, altogether!
Zero-Trust access management with true WireGuard® 2FA/MFA
Vulnerability Intelligence Platform
Security automation content in SCAP, Bash, Ansible, and other formats
🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.
Open-source tool to build your Windows script from scratch. It includes debloat, privacy, performance & app installing scripts.
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
Patch-level verification for Bundler
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
Software sandbox for storage of sensitive information in memory.
Zero shot vulnerability discovery using LLMs
WIFI / LAN intruder detector. Check the devices connected and alert you with unknown devices. It also warns of the disconnection of "always connected"...
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
详细的C/C++编程规范指南，由360质量工程部编著，适用于桌面、服务端及嵌入式软件系统。
Kubernetes Security - Best Practice Guide
NGINX tuning for best performance
X-SpringBoot是一个轻量级的Java快速开发平台，基于springboot3和jdk21，使用虚拟线程，可配置的SaaS功能具备RBAC功能、自动代码生成、多种存储系统，多种短信平...
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code w...
GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism.
Java web common vulnerabilities and security code which is base on springboot and spring security
Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It i...
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and...
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
Automated Security Testing For REST API's
Cyber Security Tool For Hacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2/TKIP/IES)
An open-source, privacy-enhancing web browser for iOS, utilizing the Tor anonymity network
HardeningKitty and Windows Hardening Settings
Web framework that allows performing periodic syncs of data sources and performing analysis on the identified results
Automation to assess the state of your M365 tenant against CISA's baselines
A tool to dump a git repository from a website